$ rpki-client -vvvf rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft File: bODpSXEbID5KyyK2gPP_9H7RbGE.mft (raw, json) Hash identifier: JG7nE5H9BW1OwXxarUcIGcYVzx1gLjf1+fqmpaU6T1c= Subject key identifier: 4F:F4:DC:67:CF:0A:84:75:E9:AC:6B:A0:F2:80:E5:40:DD:78:C9:0A Authority key identifier: 6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 Certificate issuer: /CN=A91BDC3F/serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Certificate serial: 01D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft Manifest number: 01CA Signing time: Fri 25 Sep 2026 03:55:26 +0000 Manifest this update: Fri 25 Sep 2026 03:55:25 +0000 Manifest next update: Fri 02 Oct 2026 03:55:25 +0000 Files and hashes: 1: bODpSXEbID5KyyK2gPP_9H7RbGE.crl (hash: CGszP+nH5MnqQFmvydkkcbvDJWRWbOyFk7rnQMts5Xo=) 2: 7980C32AA71B11EFA8320136C4F9AE02.roa (hash: fTwgf/z1JlaZSIUWhcpYQ8BO2OuYl7hP0D0SmMwZrI4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 03:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 473 (0x1d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDC3F, serialNumber=6CE0E949711B203E4ACB22B680F3FFF47ED16C61 Validity Not Before: Sep 25 03:55:25 2026 GMT Not After : Oct 2 03:55:25 2026 GMT Subject: CN=6ab5f0ae-9cc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:34:86:5f:55:aa:b4:6a:c3:d5:68:78:d3:3b: c8:d5:25:43:6d:40:2c:3e:18:1f:e7:df:0f:3a:8d: ca:06:ef:22:13:86:29:26:de:bf:75:eb:2a:fa:2c: 95:90:04:35:ff:c4:d3:49:63:b5:5f:76:dc:1b:21: 42:c8:12:19:a6:21:dc:56:97:00:1b:59:44:71:01: d0:f7:30:be:ce:2b:10:35:55:3d:00:30:03:85:6e: 12:f7:3c:67:7b:20:9d:9e:5f:fa:c9:ef:35:8f:1d: 4a:97:2c:c0:e3:3f:ab:ea:2e:8e:46:1a:9b:63:97: f4:e5:b6:14:81:61:9b:b5:b3:d1:10:f4:e3:24:eb: da:f6:e3:d3:d3:01:89:93:c4:d2:f0:40:1e:34:5a: 83:52:93:a0:41:0a:fa:c5:20:33:11:dd:c0:78:15: ac:9d:1e:2f:33:ce:ba:b5:52:66:bd:cc:f8:2d:40: 8f:72:16:1c:37:b0:62:75:cb:8a:9c:88:54:6a:f5: 99:35:d9:c8:ad:ff:cd:0e:0a:10:ee:f2:94:fb:a2: ee:30:55:73:2f:c6:1b:6d:7c:0b:87:95:7e:60:56: 8c:c5:aa:e6:f4:ad:a5:ba:db:12:dc:f5:b9:46:82: 72:cc:17:57:58:d6:0f:41:60:ca:68:12:57:67:1a: 8d:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F4:DC:67:CF:0A:84:75:E9:AC:6B:A0:F2:80:E5:40:DD:78:C9:0A X509v3 Authority Key Identifier: keyid:6C:E0:E9:49:71:1B:20:3E:4A:CB:22:B6:80:F3:FF:F4:7E:D1:6C:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bODpSXEbID5KyyK2gPP_9H7RbGE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDC3F/5CE810460EB011EF872E8127C4F9AE02/bODpSXEbID5KyyK2gPP_9H7RbGE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 40:2b:d7:60:2a:b5:22:5c:16:ab:6b:c6:8d:3f:59:7d:7d:05: ed:c0:ba:6b:1d:98:b1:d0:05:9f:71:e9:e9:ad:b9:ea:a8:26: f8:71:15:47:3a:68:d3:1e:75:59:66:4d:9c:2a:e7:18:be:d0: 29:e2:fa:51:03:6c:68:e3:3e:87:6b:52:d3:69:7f:0a:89:55: 16:dc:1c:76:9b:a3:d7:b5:d3:59:13:91:f8:c8:7d:8c:e6:06: 7a:7b:51:3d:34:f3:fb:35:b4:cd:53:9f:be:c6:53:cc:01:e2: 09:c7:3f:4e:1d:59:fb:63:5f:16:33:8e:33:65:36:3f:3b:ee: 24:dc:70:e7:8c:9e:9c:13:20:fa:84:1d:2d:64:07:f5:d3:79: 85:93:30:76:e6:d2:52:76:76:f9:b8:4d:1d:d3:8b:b7:c3:6f: 71:4b:bf:62:69:9a:a2:49:4e:6e:d1:7d:f5:4c:02:9e:14:c8: 2c:98:00:c6:df:de:7c:ed:d9:5c:74:09:6d:ac:f5:a0:b9:76: f7:14:92:c1:a9:5c:1d:fb:2f:34:8c:10:ba:71:c9:1c:08:0f: a1:06:00:1c:31:c4:29:59:93:33:99:dd:50:dc:cd:d0:28:0a: fc:dd:81:2f:72:6d:38:43:01:84:68:73:7b:ef:11:b0:8a:5b: 70:ae:6b:5e -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAdkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRDM0YxMTAvBgNVBAUTKDZDRTBFOTQ5NzExQjIwM0U0QUNCMjJCNjgwRjNGRkY0 N0VEMTZDNjEwHhcNMjYwOTI1MDM1NTI1WhcNMjYxMDAyMDM1NTI1WjAYMRYwFAYD VQQDEw02YWI1ZjBhZS05Y2M1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTSGX1WqtGrD1Wh40zvI1SVDbUAsPhgf598POo3KBu8iE4YpJt6/desq+iyV kAQ1/8TTSWO1X3bcGyFCyBIZpiHcVpcAG1lEcQHQ9zC+zisQNVU9ADADhW4S9zxn eyCdnl/6ye81jx1KlyzA4z+r6i6ORhqbY5f05bYUgWGbtbPREPTjJOva9uPT0wGJ k8TS8EAeNFqDUpOgQQr6xSAzEd3AeBWsnR4vM866tVJmvcz4LUCPchYcN7BidcuK nIhUavWZNdnIrf/NDgoQ7vKU+6LuMFVzL8YbbXwLh5V+YFaMxarm9K2lutsS3PW5 RoJyzBdXWNYPQWDKaBJXZxqNXwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE/03GfP CoR16axroPKA5UDdeMkKMB8GA1UdIwQYMBaAFGzg6UlxGyA+SssitoDz//R+0Wxh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREMzRi81Q0U4MTA0NjBF QjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklENUt5eUsyZ1BQXzlIN1Ji R0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JPRHBTWEViSUQ1S3l5SzJnUFBfOUg3UmJHRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC REMzRi81Q0U4MTA0NjBFQjAxMUVGODcyRTgxMjdDNEY5QUUwMi9iT0RwU1hFYklE NUt5eUsyZ1BQXzlIN1JiR0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAQCvXYCq1IlwWq2vGjT9ZfX0F7cC6ax2YsdAFn3Hp6a256qgm+HEVRzpo0x51 WWZNnCrnGL7QKeL6UQNsaOM+h2tS02l/ColVFtwcdpuj17XTWROR+Mh9jOYGentR PTTz+zW0zVOfvsZTzAHiCcc/Th1Z+2NfFjOOM2U2PzvuJNxw54yenBMg+oQdLWQH 9dN5hZMwdubSUnZ2+bhNHdOLt8NvcUu/YmmaoklObtF99UwCnhTILJgAxt/efO3Z XHQJbaz1oLl29xSSwalcHfsvNIwQunHJHAgPoQYAHDHEKVmTM5ndUNzN0CgK/N2B L3JtOEMBhGhze+8RsIpbcK5rXg== -----END CERTIFICATE-----Generated at Sun Sep 27 06:13:31 2026 by rpki-client